Use client certificates to authenicate to an access list on a CISCO PIX

[brianmcdowell]

How do I Use client certificates to authenticate to an access list on a CISCO PIX firewall 515E?

PIX Firewall Version 6.3(1)

Cisco PIX Device Manager Version 3.0(1)

For Example: When a client authenticates using VPN the PIX should assign him port access based on his certicate.

[milan.kulik]

Hi,

you can assign a VPN user to a VPN group based on the ou field in his certificate.

He can receive his IP address from the proper local pool then.

You can base your ACL on the user source address finally.

Regards,

Milan

[brianmcdowell]

Thanks for your help

-Brian-